Single sign on (SSO)
Use Open ID Connect (OIDC) to log into Airbyte using an Identity Provider (IdP) like Okta or Entra ID/Active Directory.
Set up single sign on
Administrators must set up SSO before your organization can use it. The steps differ slightly depending on which IdP you use and whether you're on the Cloud or Self-Managed version of Airbyte. To get started, choose your identity provider below.
Entra ID
This guide shows you how to set up Microsoft Entra ID (formerly Azure ActiveDirectory) and Airbyte so your users can log into Airbyte using your organization's identity provider (IdP) and OpenID Connect (OIDC).
Okta
This guide shows you how to set up Okta and Airbyte so your users can log into Airbyte using your organization's identity provider (IdP).
Log into Airbyte using single sign on
- Cloud
- Self-Managed
-
Visit Airbyte Cloud and click Continue with SSO.
-
Type your Company identifier, then click Continue with SSO. Airbyte forwards you to your identity provider's login page.
-
Log into your work account. Your IdP forwards you back to Airbyte Cloud, which logs you in.
-
Access your self-managed instance of Airbyte at the URL your organization has set up. Airbyte automatically forwards you to your identity provider's login page.
-
Log into your IdP. Your IdP forwards you back to Airbyte, which logs you in.
If you were already logged into your company’s IdP somewhere else, you might not see a login screen. In this case, Airbyte forwards you directly to Airbyte's logged-in area.
Troubleshooting
If you contact Airbyte Support about an SSO login problem, including a HAR file and the details of the relevant network requests helps Airbyte diagnose your issue and turn around a resolution faster.
Capture a HAR file
A HAR (HTTP Archive) file records the network activity between your browser and Airbyte. It's one of the most helpful things you can share with Airbyte Support, because it captures the exact requests your browser made, along with their responses and any errors.
- Chrome and Edge
- Firefox
- Safari
-
Open the Airbyte page where you encountered the problem.
-
Open developer tools. Right-click anywhere on the page and click Inspect, or press F12 (Windows and Linux) or Option+Cmd+I (Mac).
-
Click the Network tab.
-
Select Preserve log so requests aren't cleared when the page reloads or redirects.
-
Click Clear (the ⊘ icon) to remove any existing requests.
-
Reproduce the problem while developer tools stays open. Airbyte records each network request as it happens.
-
Right-click any request in the list, then click Save all as HAR with content.
-
Save the file to your computer.
-
Open the Airbyte page where you encountered the problem.
-
Open developer tools. Open the application menu and click More tools > Web Developer Tools, or press F12 (Windows and Linux) or Option+Cmd+I (Mac).
-
Click the Network tab.
-
Click the settings icon and confirm Persist Logs is enabled so requests aren't cleared when the page reloads or redirects.
-
Reproduce the problem while developer tools stays open. Airbyte records each network request as it happens.
-
Right-click any request in the list, then click Save All As HAR.
-
Save the file to your computer.
-
Enable the Develop menu if you haven't already. Click Safari > Settings > Advanced, then select Show features for web developers.
-
Open the Airbyte page where you encountered the problem.
-
Click Develop > Show Web Inspector, or press Option+Cmd+I.
-
Click the Network tab.
-
Select Preserve Log so requests aren't cleared when the page reloads or redirects.
-
Reproduce the problem while the Web Inspector stays open. Airbyte records each network request as it happens.
-
Click the Export icon and save the HAR file to your computer.
HAR files can contain sensitive information, such as authentication tokens, cookies, and any data visible on the page. Only share HAR files with Airbyte Support, and let them know if there's anything you want to review or redact first.
Find the authentication requests
SSO login sends your browser through a series of redirects between Airbyte and your identity provider. Capturing these requests shows where the login flow breaks down.
-
Open developer tools and click the Network tab, following the steps above to capture requests.
-
Select Preserve log (Persist Logs in Firefox). This is important for SSO, because the login flow redirects across multiple pages and domains, and requests are otherwise cleared on each redirect.
-
Reproduce the problem by attempting to log in with SSO.
-
Look for requests to your identity provider (for example, Okta or Entra ID) and to Airbyte's authentication endpoints, and for any request that returns a
4xxor5xxstatus. -
Click a failing request and review the Response and Preview tabs for error messages, and the Headers tab for the request details.
-
Include these requests, along with the HAR file, in your support submission.